Ajax call to server issue

[lyapounov]

(13-07-2022 14:11)simoncn Wrote:  Having thought about this some more, it is my understanding that opening this up by adding 'Access-Control-Allow-Origin: *' would enable anyone to host a public web page that could invoke a local rescan for MinimServer if the web page knew (or could guess) the local IP address of the MinimServer instance. This could happen in the background without the user being aware and would also enable any other MinimServer command to be run by an attacker.

That is the beauty but also the huge drawback of UPnP : when I am listening to my music, everyone on the network can change the music I am listening. This does not require knowing the IP and the port of minimserver, and is as boring, if not worst, than trying to hack the server itself ;-)

Thx Simon, I'll manage differently then.